Cyber alerts

Critical Use-After-Free Remote Code Execution Vulnerability in Linux Kernel

A Critical remote code execution vulnerability in specific Linux kernel versions with ksmbd enabled has been disclosed via Zero Day Initiative (ZDI-22-1690)

Apple Releases Security Updates for Multiple Products

The security updates include an exploited vulnerability in iOS, iPadOS, Safari, tvOS, and macOS Ventura

VMware Releases Critical Security Updates for Multiple Products

Two critical advisories affect ESXi, Workstation, Fusion, and vRealize Network Insight and one important advisory affects Workspace One Access and Identity Manager

Critical Update for VMware Workspace ONE Assist

VMware has released a Critical security update to address five vulnerabilities in VMware Workspace ONE Assist

VMware Releases Critical Security Update for Cloud Foundation

Critical update addresses an RCE vulnerability and a second vulnerability that could lead to a DoS condition

Apple Releases Security Updates for Multiple Products

The released security updates include an exploited zero-day vulnerability in iPadOS and iOS

Oracle Releases October 2022 Critical Patch Update Advisory

Scheduled advisory includes 370 security updates across multiple Oracle product families

Malware Persistence within VMware ESXi Hypervisors

Active Exploitation of Zoho ManageEngine RCE Vulnerability CVE-2022-35405

CISA have announced that a critical vulnerability affecting Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus is being actively exploited

Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager

Microsoft security update addresses a spoofing vulnerability in Endpoint Configuration Manager